CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 00:20 UTC )
This week: 5,196 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,196 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-97975 Not yet scored Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() Assigned by Linux
Sep 25, 2026 CVE-2026-97974 Not yet scored ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() Assigned by Linux
Sep 25, 2026 CVE-2026-97973 Not yet scored net: macb: destroy the phylink instance on the probe error path Assigned by Linux
Sep 25, 2026 CVE-2026-97972 Not yet scored net: macb: put the "mdio" child node reference on success Assigned by Linux
Sep 25, 2026 CVE-2026-97971 High 7.8 nstree: check listing permission before taking a namespace reference Assigned by Linux
Sep 25, 2026 CVE-2026-97970 Not yet scored watchdog: msc313e: Avoid division by zero Assigned by Linux
Sep 25, 2026 CVE-2026-97969 Not yet scored watchdog: msc313e: Fix clock leak and spurious timer in settimeout() Assigned by Linux
Sep 25, 2026 CVE-2026-97968 Not yet scored hwmon: (corsair-cpro) Create debugfs entries after hwmon registration Assigned by Linux
Sep 25, 2026 CVE-2026-97967 Not yet scored hwmon: (corsair-cpro) Remove debugfs entries when probe fails Assigned by Linux
Sep 25, 2026 CVE-2026-97966 Not yet scored octeontx2-pf: reset HTB scheduler topology before freeing queues Assigned by Linux
Sep 25, 2026 CVE-2026-97965 Not yet scored vxlan: initialize _md in vxlan_xmit_one() Assigned by Linux
Sep 25, 2026 CVE-2026-97964 Not yet scored ppp_synctty: ensure a writeable skb header Assigned by Linux
Sep 25, 2026 CVE-2026-97963 Not yet scored net: stmmac: initialize ptp_lock at probe time Assigned by Linux
Sep 25, 2026 CVE-2026-97962 Not yet scored net/mlx5e: Move representor vnic reporter to eswitch devlink port Assigned by Linux
Sep 25, 2026 CVE-2026-97961 Not yet scored perf/core: Allow list_del during perf_event_overflow() Assigned by Linux
Sep 25, 2026 CVE-2026-97960 Not yet scored perf/x86/intel: Prevent drain_pebs() reentry Assigned by Linux
Sep 25, 2026 CVE-2026-97959 Not yet scored net/sched: cls_route: free emptied bucket on filter move Assigned by Linux
Sep 25, 2026 CVE-2026-97958 Not yet scored net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Assigned by Linux
Sep 25, 2026 CVE-2026-97957 High 8.8 net: hinic: fix mailbox segment buffer overflow Assigned by Linux
Sep 25, 2026 CVE-2026-97956 Not yet scored net: net_failover: Fix the deadlock in net_failover_slave_name_change() Assigned by Linux
Sep 25, 2026 CVE-2026-97955 Not yet scored net: mana: restore the XDP program pointer when pre-allocation fails Assigned by Linux
Sep 25, 2026 CVE-2026-97954 Not yet scored net/rds: fix tcp stream corruption with large pages Assigned by Linux
Sep 25, 2026 CVE-2026-97953 High 7.0 net: stmmac: fix TX descriptor availability check for TSO traffic Assigned by Linux
Sep 25, 2026 CVE-2026-97952 Not yet scored sunvdc: unmap LDC cookies when the descriptor send fails Assigned by Linux
Sep 25, 2026 CVE-2026-97951 Not yet scored scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Assigned by Linux
Sep 25, 2026 CVE-2026-97950 Not yet scored configfs: pin the symlink target's dirent instead of chasing ->ci_dentry Assigned by Linux
Sep 25, 2026 CVE-2026-97949 Not yet scored configfs: unhash the dentry before dropping the item in rmdir Assigned by Linux
Sep 25, 2026 CVE-2026-97948 Not yet scored powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Assigned by Linux
Sep 25, 2026 CVE-2026-97947 Not yet scored x86/amd_node: Fix potential NULL pointer dereference Assigned by Linux
Sep 25, 2026 CVE-2026-97946 Not yet scored x86/amd_node: Fix PCI device reference counting in amd_smn_init() Assigned by Linux
Sep 25, 2026 CVE-2026-97945 Not yet scored x86/mm: Fix user-space data loss with MADV_FREE and THP Assigned by Linux
Sep 25, 2026 CVE-2026-97944 Not yet scored x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() Assigned by Linux
Sep 25, 2026 CVE-2026-97943 Not yet scored x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF Assigned by Linux
Sep 25, 2026 CVE-2026-97942 Not yet scored x86/alternatives: Exclude text poking against change_page_attr() Assigned by Linux
Sep 25, 2026 CVE-2026-97941 High 7.8 mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race Assigned by Linux
Sep 25, 2026 CVE-2026-97940 High 7.8 ipv6: fix fib6 walker UAF on seq stop Assigned by Linux
Sep 25, 2026 CVE-2026-97939 Not yet scored ipmr: account multicast table and route memory Assigned by Linux
Sep 25, 2026 CVE-2026-97938 Not yet scored reboot: fix cad_pid use-after-free race Assigned by Linux
Sep 25, 2026 CVE-2026-97937 High 7.8 ftrace: fork: Initialize function graph state before copy_exec_state() Assigned by Linux
Sep 25, 2026 CVE-2026-97936 Not yet scored tracing: Fix memory corruption from the histogram stacktrace modifier Assigned by Linux
Sep 25, 2026 CVE-2026-97935 Not yet scored tracing: Set the trace clock before registering the histogram trigger Assigned by Linux
Sep 25, 2026 CVE-2026-97934 Not yet scored tracing: Fix memory corruption from a "STACKTRACE" histogram key Assigned by Linux
Sep 25, 2026 CVE-2026-97933 Not yet scored tracing: Take trace_array reference when opening a tracer options file Assigned by Linux
Sep 25, 2026 CVE-2026-97932 Not yet scored tracing: Don't dereference trace_event_file in deferred trigger free Assigned by Linux
Sep 25, 2026 CVE-2026-97931 High 7.0 ALSA: us122l: Prevent write upgrades for read mappings Assigned by Linux
Sep 25, 2026 CVE-2026-97930 Not yet scored ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf Assigned by Linux
Sep 25, 2026 CVE-2026-97929 Not yet scored ALSA: usbusx2y: validate URB actual_length in interrupt callback Assigned by Linux
Sep 25, 2026 CVE-2026-97928 Not yet scored drm/amdgpu: skip the VMID 0 flush for VRAM Assigned by Linux
Sep 25, 2026 CVE-2026-97927 Not yet scored ufs: create the root dentry after loading cylinder metadata Assigned by Linux
Sep 25, 2026 CVE-2026-97926 High 7.0 ufs: validate cylinder group metadata before caching it Assigned by Linux
Sep 25, 2026
Previous Page 19 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
